Skip to main content
This guide applies to Apple devices

​
About OS Update Delay and Enforcement

To maintain a consistent software update schema across your organization, you can defer software updates and choose when they’ll automatically be installed. There are two places you’ll want to configure this: Software Update profile and Restrictions profile from within your Library.

​
How It Works

Iru Endpoint provides flexible options for managing OS updates:
  • Delay periods - Configure how long to wait before enforcing updates
  • Enforcement policies - Set automatic or manual enforcement rules
  • User notifications - Keep users informed about pending updates
  • Compliance tracking - Monitor which devices have successfully updated

​
Software Update Library Item

You can use the Software Update Library Item to manage downloading, installing, and deferring updates. This is a great way to make sure that, at minimum, security updates are being automatically installed on all of your devices.
Software Update is only supported on macOS 10.7+ and on iOS and iPadOS 18.0+.

​
Create a Software Update Library Item

To add this Library Item to your Iru Endpoint Library, follow the steps outlined in the Library Overview article.

​
Configure the Software Update Library Item

1

Name the profile

Give your software update profile a Name.
2

Assign to Blueprints

Assign to your desired Blueprints.
3

Configure automatic updates

Select your desired settings for Automatic Updates.
4

Configure iOS and iPadOS deferrals

Check the Defer iOS and iPadOS updates box.Select the desired deferrals for iOS and iPadOS devices.
5

Configure macOS deferrals

Select Defer macOS updates by type for Defer macOS updates.Select the desired deferrals for each macOS update type.
6

Save the configuration

Click Save in the bottom right corner.

​
Restrictions Library Item

You can defer OS updates with the Restrictions profile in your Iru Endpoint Library. This option allows you to defer updates for a specified number of days. This can be especially helpful if you’re managing Mac computers, iOS, iPadOS, and tvOS. The Restrictions profile allows you to choose whether any of the options set are applied to the specific platform you want to restrict. For Mac computers, Iru Endpoint recommends using a Software Update Library Item and deferring updates by specific types.

​
Block Beta & Standard Upgrades

The native options for blocking beta updates are also enabled using the Software Update profile in your Blueprints. With macOS Monterey 12.3 and later, a user can be offered a new software upgrade path to macOS Ventura without running a larger full installer app or authenticating as an administrator. Due to this change, the App Blocking Library Item can’t block these upgrades. The only circumstance when the App Blocking Library Item will block the update is when it’s downloaded from the Mac App Store. Learn more about Restricting Access to Beta OS Releases. The following examples are specific to macOS Sonoma, macOS Ventura, and macOS Monterey. For each release, you’ll need to update each setting with the relevant info specific to that release. This will only block the installer if it’s downloaded from the App Store and won’t block the update in Software Update. Tahoe - Public Release
  • Process name: Install macOS Tahoe
    • Match Type: Contains
  • Path: /Applications/Install macOS Tahoe.app
    • Match Type: Contains
  • Bundle ID: com.apple.InstallAssistant.macOSTahoe
    • Match Type: Exact
Sequoia - Public Release
  • Process name: Install macOS Sequoia
    • Match Type: Contains
  • Path: /Applications/Install macOS Sequoia.app
    • Match Type: Contains
  • Bundle ID: com.apple.InstallAssistant.macOSSequoia
    • Match Type: Exact
Sonoma - Public Release
  • Process name: Install macOS Sonoma
    • Match Type: Contains
  • Path: /Applications/Install macOS Sonoma.app
    • Match Type: Contains
  • Bundle ID: com.apple.InstallAssistant.macOSSonoma
    • Match Type: Exact
Ventura - Public Release
  • Process name: Install macOS Ventura
    • Match Type: Contains
  • Path: /Applications/Install macOS Ventura.app
    • Match Type: Contains
  • Bundle ID: com.apple.InstallAssistant.macOSVentura
    • Match Type: Exact
Monterey - Public Release
  • Process name: Install macOS Monterey
    • Match Type: Contains
  • Path: /Applications/Install macOS Monterey.app
    • Match Type: Contains
  • Bundle ID: com.apple.InstallAssistant.macOSMonterey
    • Match Type: Exact